Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/323830343a3233383a3a2f33322d3634203d3e203233313036.roa
File:                     323830343a3233383a3a2f33322d3634203d3e203233313036.roa (raw, json)
Hash identifier:          TDrtBfCeY153Z2vPMZts21rPU2OuN2Iw4cs9XBzxjZw=
Subject key identifier:   C8:38:16:4F:4D:31:AF:D0:43:19:02:AE:62:EA:82:0F:0F:E7:7C:86
Certificate issuer:       /CN=E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC
Certificate serial:       3E424E5D88C2E89FE5CCAEB7FA8F00A7C64195FC
Authority key identifier: E6:DD:4A:59:FA:8F:F5:B9:19:C1:CC:8C:B6:3B:8E:D9:50:2A:B7:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/323830343a3233383a3a2f33322d3634203d3e203233313036.roa
Signing time:             Mon 04 May 2026 18:54:56 +0000
ROA not before:           Mon 04 May 2026 18:49:56 +0000
ROA not after:            Mon 03 May 2027 18:54:56 +0000
asID:                     23106
IP address blocks:        2804:238::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.crl
                          rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 10:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:42:4e:5d:88:c2:e8:9f:e5:cc:ae:b7:fa:8f:00:a7:c6:41:95:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC
        Validity
            Not Before: May  4 18:49:56 2026 GMT
            Not After : May  3 18:54:56 2027 GMT
        Subject: CN=C838164F4D31AFD0431902AE62EA820F0FE77C86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:78:44:77:18:71:c7:36:34:a1:d3:e8:3a:30:
                    74:ca:6a:3d:6a:d1:26:6c:d9:ec:98:49:e1:7f:0e:
                    9d:fb:7c:1b:b6:2b:5d:54:b0:23:3e:5e:89:73:69:
                    92:07:74:47:97:23:09:1e:9c:31:80:39:18:f6:04:
                    ea:0a:03:db:00:b1:fd:83:19:55:27:64:d1:8f:27:
                    61:08:b7:6d:9f:0c:f6:d2:c2:85:cb:13:37:34:43:
                    7b:77:42:34:96:fd:dd:f4:4c:05:7a:db:f2:24:78:
                    7b:c9:6d:c4:71:fd:1e:94:b9:6a:c4:d2:0f:ee:ba:
                    b2:48:75:8b:8c:ce:84:4d:01:b9:c5:6e:ac:f3:b5:
                    5c:c0:45:6b:17:56:de:9c:5a:3d:36:6b:80:e7:a6:
                    3a:68:76:b0:47:0a:a5:1b:33:1f:9b:60:b0:2d:64:
                    5e:2e:87:1d:74:f6:0e:c1:b4:85:f2:af:32:d6:68:
                    a7:ed:1d:e3:cc:dc:a1:00:f4:8c:ac:7e:29:03:fc:
                    90:fb:d3:75:93:4d:50:9e:96:35:e2:b5:b3:c7:e7:
                    b2:62:b7:3f:92:08:85:cf:67:9d:4a:68:fd:ce:d6:
                    32:ae:da:33:26:cc:88:d7:df:40:ed:90:91:bf:e2:
                    71:d5:bb:48:58:2f:9a:89:bd:0b:58:58:e6:3b:9b:
                    e2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:38:16:4F:4D:31:AF:D0:43:19:02:AE:62:EA:82:0F:0F:E7:7C:86
            X509v3 Authority Key Identifier:
                keyid:E6:DD:4A:59:FA:8F:F5:B9:19:C1:CC:8C:B6:3B:8E:D9:50:2A:B7:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6DD4A59FA8FF5B919C1CC8CB63B8ED9502AB7CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5fL73DmQQbfDovfqppPcgGEv1VkQnuxkPiGiMzcKcx4h/0/323830343a3233383a3a2f33322d3634203d3e203233313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:238::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:04:2e:28:c0:d5:bd:7f:2a:f1:d0:4e:75:7c:f3:ae:a9:09:
         69:9d:01:31:65:a8:a0:dd:2d:e6:28:65:19:52:dd:8f:e0:39:
         35:a5:05:6f:71:b6:75:cc:76:16:6e:8f:fc:92:b7:03:9d:66:
         14:39:06:34:b9:55:75:54:9e:a3:9f:49:e9:fb:78:c7:0b:5b:
         8a:07:b0:d8:0b:f8:80:1e:cc:78:38:fe:e0:10:55:82:0d:2b:
         dd:72:e1:99:0b:15:a3:02:06:d2:49:0b:22:d2:33:27:fa:0c:
         5d:9b:8d:a2:fb:1b:c3:91:f6:cc:f7:ef:0d:7a:ad:80:2d:88:
         37:1a:a2:46:6b:be:19:b6:c7:28:32:ac:7e:ef:e7:3f:e4:1c:
         ea:d8:47:9c:20:4b:8d:6b:55:13:c1:3f:91:2b:18:50:08:de:
         05:16:c9:95:64:24:9b:3f:4d:0a:8a:2d:0d:e4:6b:3a:5b:8d:
         ba:03:7d:17:03:a1:9e:1f:f8:9d:42:22:49:3f:f2:04:15:09:
         39:69:d4:8d:a9:06:3a:6b:91:6e:37:ed:f6:ac:1d:1b:96:fc:
         fc:eb:89:03:57:ad:f8:ff:1a:85:85:46:80:b7:08:10:49:50:
         a8:62:0f:5a:06:ad:70:d6:69:55:f8:4a:e2:9f:28:d8:7e:a7:
         55:68:4c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:02:18 2026 by rpki-client